[unisog] Problems with EDU.COM domain
Connie_Sadler at Brown.edu
Thu Mar 30 17:50:56 GMT 2006
Just wanted to report that I made a call in to Vantage Media and
Brown.edu.com is no more.
Thanks to those who helped with this!
Connie J. Sadler, CM, CISSP, CISM, GIAC GSLC
Director, IT Security, Brown University
Box 1885, Providence, RI 02912
From: unisog-bounces at lists.sans.org
[mailto:unisog-bounces at lists.sans.org] On Behalf Of Jeffrey Altman
Sent: Thursday, March 30, 2006 12:37 PM
To: UNIversity Security Operations Group
Subject: Re: [unisog] Problems with EDU.COM domain
Conor McGrath wrote:
> Vantage Media registered the edu.com domain and then realized that
> lots of folks were hitting xxx.edu.com when they really wanted
> Rather than have these folks get 404 errors Vantage felt it would be
> more helpful to show the pages that point to specific information
> about the institution the user was really trying to find.
(1) Why did Vantage Media register this domain in the first place?
There must have been some commercial interest or they would not have
(2) If Vantage Media was truly concerned about users not reaching
www.columbia.edu when they went to the page www.columbia.edu.com
then all they had to do was provide a redirect to the
www.columbia.edu page. Why bother setting up on infrastructure
to collect personal information and then need to setup the necessary
liaison relationships with the admission offices? What admission
office in their right mind would accept personal data about
prospective students from an untrusted third party in the first
(3) What is Vantage Media doing with all of the e-mail they collecting?
primary name server = pdns1.ultradns.net
responsible mail addr = mark.vantagemedia.com
Why even bother to setup a wildcard MX record such that all
misdirected mail gets delivered to them instead of being bounced
back to the sender?
Fundamentally, there is no rationale explanation for why anyone would
setup web pages and mail capture unless they were attempting to obtain
If Vantage Media wants to do the correct thing, they will transfer
ownership of the .edu.com domain to EDUCAUSE immediately. Otherwise, I
suspect they will be hearing from a number of lawyers.
More information about the unisog